CVE-2012-2147

MEDIUM 5.0CVE-2012-2147 · Published 26/08/2012 · updated 16/06/2026

In short

CVE-2012-2147 is a MEDIUM (CVSS 5.0) vulnerability affecting munin (munin-monitoring).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
munin munin-monitoring	`= 2.0_rc4`	No fix yet

Description

munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.

References

openwall.com/lists/oss-security/2012/04/17/2
openwall.com/lists/oss-security/2012/04/18/2
openwall.com/lists/oss-security/2012/04/19/3
openwall.com/lists/oss-security/2012/04/19/4
openwall.com/lists/oss-security/2012/04/19/5
openwall.com/lists/oss-security/2012/04/27/7
openwall.com/lists/oss-security/2012/04/29/2
exchange.xforce.ibmcloud.com/vulnerabilities/78924

More vulnerabilities in munin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

munin

munin-monitoring

= 2.0_rc4

No fix yet

More vulnerabilities in munin

See all →